Skip to content

doNTreuse.sh is a simple Bash script for examining the extent of NT hash reuse from the result of Impacket's secretsdump.py.

License

Notifications You must be signed in to change notification settings

crabfeather/doNTreuse

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

doNTreuse.sh

Description:

doNTreuse.sh is a simple Bash script for examining the extent of NT hash reuse from the result of Impacket's secretsdump.py. This is done by parsing the hashes, outputting groups separated by a delimiter containing all users who share the same password, and highlighting any administrators.

The tool is built to work with below format, but feel free to customize the regex for your needs.

<username>:<id>:<lm-hash>:<nt-hash>:::

How to use:

./doNTreuse.sh ./hashes.txt ./admins.txt

Where "hashes.txt" is a list all hashes (one per line), and "admins.txt" is a list of all adminstrators (one per line).

About

doNTreuse.sh is a simple Bash script for examining the extent of NT hash reuse from the result of Impacket's secretsdump.py.

Topics

Resources

License

Stars

Watchers

Forks

Languages